server/secrets/terraform/plan-files, branch main Unnamed repository; edit this file 'description' to name the repository. http://euandre.org/git/server/atom?h=main 2021-01-15T20:29:39Z Remove secrets/terraform/plan-files/ and terraform-apply.sh 2021-01-15T20:29:39Z EuAndreh eu@euandre.org 2021-01-15T20:29:39Z urn:sha1:74abfe68d21de295b07c22f0d12f6525daac4c62 vps.tf: Add CNAME "*" subdomain alias 2020-11-28T15:00:36Z EuAndreh eu@euandre.org 2020-11-28T15:00:36Z urn:sha1:3437e71b64e68e69dc8377ee67b68b8a9ece6de7 Terraform: Add email DNS records (DKIM, DMARC, SPF) 2020-11-26T18:18:06Z EuAndreh eu@euandre.org 2020-11-26T18:17:36Z urn:sha1:e317780e0a59b55d1203987dcbfa515ce93c1b3d Remove default.nix and shell.nix 2020-11-18T14:30:52Z EuAndreh eu@euandre.org 2020-11-18T14:28:42Z urn:sha1:c265ec0deeea7d5d4328c34df524bc5d1f163763 Remove most Nix files 2020-11-18T14:11:10Z EuAndreh eu@euandre.org 2020-11-18T14:11:10Z urn:sha1:28d15a26debe76d503a36dd3fdc7f291abe84655 Add base Guix configuration and start switching to it 2020-11-17T01:26:54Z EuAndreh eu@euandre.org 2020-11-17T01:10:25Z urn:sha1:1bf3861318f9cc362384722d4f312f3dd439c749 - remove NixOS stateVersion from .envrc; - add guix-reconfigure.sh; - add vps.scm with initial Guix system configuration; - update vps.tf to use the new "base-guix" snapshot. The "base-guix" image doesn't need a password. The "andreh" users has one, but it is configured for not requiring it when running commands as "sudo". The expected minimal steps one has to go through for privilege scalation is via the SSH private key, and accessing the VPS via SSH. Since password login is disabled and root can't login via SSH either, only the private SSH key allows access to the server. After that, the attacker will be able to run commands as root. Update terraform generated files 2020-11-02T21:38:58Z EuAndreh eu@euandre.org 2020-11-02T21:35:32Z urn:sha1:0b3cc605939b5cc731f9725bf7f33c501065e027 Refactor vps-configuration.nix: Split secrets from config and envsubst vars 2020-09-06T18:48:45Z EuAndreh eu@euandre.org 2020-09-06T12:53:58Z urn:sha1:3f1d7201bfc46ff9edaa109bc41b59908f99c23b Also rename thingTLD to thingDomain. Build new VPS server from snapshot using bigger machine 2020-08-29T21:59:14Z EuAndreh eu@euandre.org 2020-08-29T20:22:06Z urn:sha1:c6fa636da47e48f76a24f7f61320511306154aa3 I'm using the snapshot here because I don't have any backup system yet, ¯\_(ツ)_/¯ This should be reverted on vps.tf after applying, and I should get down to doing automatic backups. Enable automatic backup for VPS server 2020-08-25T20:07:48Z EuAndreh eu@euandre.org 2020-08-25T20:07:48Z urn:sha1:9927071f7bf4b9828985c85879208eb330024b32